Set - Motorola WS2000 - Wireless Switch - Network Management Device Cli Reference Manual

3-60 WS2000 Wireless Switch System Reference Guide
3.12.1 Network Firewall IPS set Command

set

Network Firewall Intrusion Prevention System Commands
Sets the Intrusion Prevention System (IPS) parameters.
Syntax
set [mode|anomaly-config|signature-categories|direction]
set mode [enable|disable]
set signature-categorises <category-list>
set direction [default|bi-directional]
set anomaly-config[-sl <smtplen>|-ml <mimelen>|-md <mimedepth>|
mode [enable|disable]
anomaly-config
[-sl <smtplen>|
-ml <mimelen>|
-md <mimedepth>|
-hl <httphline>|
-hz <httphsize>|
-hlz <httplinesize>|
-huz <httpurisize>]
signature-categories
<category-list>
direction [default|bi-directional] Sets the direction to inspect packets.
Example
admin(network.fw.ips)>set mode enable
admin(network.fw.ips)>set anomaly-config -sl 100
admin(network.fw.ips)>set direction default
admin(network.fw.ips)>set signature-categories TELNET POP3 TCP UDP
admin(network.fw.ips)>show all
IPS mode
SMTP Header length
MIME header length
Depth of MIME boundary header
Field in HTTP header
HTTP header size
HTTP header line size
-hl <httpline>|-hz <httpsize>|-hlz <httplinesize>|
-huz <httpurisize>]
Enables or disables IPS.
• -sl <smtplen> – Sets the SMTP header length.
• -ml <mimelen> – Sets the MIME header length.
• -md <mimedepth> – Sets the depth of MIME boundary header.
• -hl <httphline> – Sets the field in the HTTP header.
• -hz <httphsize> – Sets the HTTP header size.
• -hlz <httplinesize> – Sets the HTTP header line size.
• -huz <httpurisize> – Sets the HTTP URI size.
Sets the signature categories for IPS. Select <category-list> from
TELNET, POP3, IMAP, NNTP, FTP, SNMP, TCPDNS, UDPDNS,
TCPRPC, UDPRPC, HTTP, SMTP, TCPGEN, UDPGEN, ICMP, TCP,
UDP, IP.
If more than one signature category is specified, separate each category
with a space. Each of the signature category must be specified in Upper
Case only.
• default – Sets direction as default. This is defined in the signature.
• bi-directional – Sets direction as bi-directional. Packets are inspected
when received or sent.
: enable
: 1024
: 1024
: 5
: 50
: 4096
: 3072